DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3a385c81ce981fe25cb926762acfb138_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a385c81ce981fe25cb926762acfb138_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a385c81ce981fe25cb926762acfb138_JaffaCakes118
Size
66KB
MD5
3a385c81ce981fe25cb926762acfb138
SHA1
b6281947cc98aba767c7e802625bb4cce5b51399
SHA256
b0e96f3bc3257030ecd606944d60ec7df9acecf0d39749270026cf0831ae1ce6
SHA512
a5c3a3003554fff7596e48abc16d867f99547cc057fc6e88d1275abffb4ae224ebe1c77e88e747b04f0709a85a5a55148fa28e14fe25319275d950742835e234
SSDEEP
1536:dIV3PceQU5Skw8Ziw891zGGpAqYBMM3WKdHW6Mv2kdMpU1Sou:dI9Pc5n8ZH89lUqYHdHW6M+pU8
Checks for missing Authenticode signature.
resource |
---|
3a385c81ce981fe25cb926762acfb138_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE